WEBSITE ANALYSIS REPORT

http://pantasia.cfd/s/303705/s-50/

11 Jul 2026 · 22:33:21.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com2 captured requests
c.adsco.re1 captured requests
cdn.jsdelivr.net5 captured requests
cdn.redgarto.com8 captured requests
cdn.show-creative1.com2 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com5 captured requests
embed.sportspatrika.com2 captured requests
embedhd.st2 captured requests
exposestrat.com4 captured requests
fonts.googleapis.com1 captured requests
nfqauw64ptls.l4.adsco.re1 captured requests
nfqauw64ptls.n4.adsco.re1 captured requests
nfqauw64ptls.s4.adsco.re1 captured requests
pantasia.cfd1 captured requests
pl29864285.effectivecpmnetwork.com1 captured requests
pl30151072.effectivecpmnetwork.com3 captured requests
portalfluently.com4 captured requests
protrafficinspector.com6 captured requests
realizationnewestfangs.com9 captured requests
spendsdetachment.com7 captured requests
workdeadlinededicate.com7 captured requests
www.cdn4ads.com2 captured requests
www.highperformanceformat.com5 captured requests
zf.sculshbises.com1 captured requests
zoologyfibre.com15 captured requests

Connections

embed.sportspatrika.com → c.adsco.reLoads from1 captured connections
embed.sportspatrika.com → embedhd.stEmbeds1 captured connections
embed.sportspatrika.com → nfqauw64ptls.l4.adsco.reCalls1 captured connections
embed.sportspatrika.com → nfqauw64ptls.n4.adsco.reCalls1 captured connections
embed.sportspatrika.com → nfqauw64ptls.s4.adsco.reCalls1 captured connections
embed.sportspatrika.com → www.cdn4ads.comLoads from2 captured connections
embedhd.st → acscdn.comLoads from2 captured connections
embedhd.st → exposestrat.comEmbeds1 captured connections
embedhd.st → exposestrat.comLoads from1 captured connections
exposestrat.com → cdn.jsdelivr.netLoads from3 captured connections
exposestrat.com → zf.sculshbises.comLoads from1 captured connections
pantasia.cfd → cdn.jsdelivr.netLoads from2 captured connections
pantasia.cfd → cdn.redgarto.comCalls4 captured connections
pantasia.cfd → cdn.redgarto.comLoads from4 captured connections
pantasia.cfd → cdn.show-creative1.comCalls2 captured connections
pantasia.cfd → cdn.show-sb.comCalls1 captured connections
pantasia.cfd → cdn.storageimagedisplay.comLoads from5 captured connections
pantasia.cfd → embed.sportspatrika.comEmbeds1 captured connections
pantasia.cfd → fonts.googleapis.comLoads from1 captured connections
pantasia.cfd → pl29864285.effectivecpmnetwork.comLoads from1 captured connections
pantasia.cfd → pl30151072.effectivecpmnetwork.comLoads from3 captured connections
pantasia.cfd → portalfluently.comLoads from4 captured connections
pantasia.cfd → protrafficinspector.comCalls6 captured connections
pantasia.cfd → realizationnewestfangs.comCalls3 captured connections
pantasia.cfd → realizationnewestfangs.comLoads from6 captured connections
pantasia.cfd → spendsdetachment.comCalls3 captured connections
pantasia.cfd → spendsdetachment.comLoads from4 captured connections
pantasia.cfd → workdeadlinededicate.comCalls2 captured connections
pantasia.cfd → workdeadlinededicate.comLoads from5 captured connections
pantasia.cfd → www.highperformanceformat.comLoads from5 captured connections
pantasia.cfd → zoologyfibre.comCalls6 captured connections
pantasia.cfd → zoologyfibre.comLoads from9 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:32:43.872 GET 200 document 3.9 KB 773 ms 1 alerts

22:32:45.052 GET 200 stylesheet 227.5 KB 6415 ms —

22:32:45.054 GET 200 script 95.6 KB 598 ms —

22:32:45.056 GET 200 script 50.2 KB 485 ms 4 alerts

22:32:45.058 GET 200 script 91.3 KB 911 ms 1 alerts

22:32:45.059 GET 200 script 50.2 KB 887 ms 4 alerts

Transaction #49

Request / response

URL

GET HTTPS

https://www.highperformanceformat.com/482895c5e4d360bf99d74f2c7120e1ad/invoke.js

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://pantasia.cfd/s/303705/s-50/

Resource information

File type: JavaScript source, ASCII text, with very long lines (51440), with no line terminators
MIME type: application/javascript
First seen (UTC): 11 Jul 2026 · 22:33:30.941 UTC
Last seen (UTC): 11 Jul 2026 · 22:33:30.941 UTC
Times seen: 1

Size: 50.2 KB (51440 bytes)
MD5: e2a36479c720d25e7da2a88f5e0237a2
SHA1: 55fe3903714d22262e4841b6d6a3e909ff2759b9
SHA256: 239765a3e697148533327a6a9812b8fc91f856b4d68867318b13fdba225f16af

Certificate information

Issuer: Let's Encrypt · YR2
Subject: highperformanceformat.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 54:46:9A:99:5D:9F:19:5B:67:21:55:1F:5C:6F:38:A2:52:41:7E:57
Valid from: Sun, 07 Jun 2026 22:27:03 GMT
Valid until: Sat, 05 Sep 2026 22:27:02 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /482895c5e4d360bf99d74f2c7120e1ad/invoke.js HTTP/1.1
Host: www.highperformanceformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://pantasia.cfd/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 11 Jul 2026 22:32:45 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Platform,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Full-Version-List
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: www.highperformanceformat.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fc31bbeb0808d299dde500727e609752
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

22:32:45.061 GET 200 script 50.2 KB 477 ms 4 alerts

22:32:45.062 GET 200 script 50.3 KB 473 ms 4 alerts

22:32:45.064 GET 200 script 78.8 KB 19 ms —

22:32:51.525 GET 200 script 5.0 KB 1129 ms 2 alerts

22:32:51.527 GET 200 script 83.4 KB 142 ms —

22:32:51.532 GET 200 xhr 40 B 114 ms —

22:32:51.534 GET 200 script 5.0 KB 377 ms —

22:32:51.535 GET 200 img 0 B 477 ms 2 alerts

22:32:51.538 GET 200 xhr 40 B 129 ms —

22:32:51.540 GET 200 script 18.2 KB 384 ms —

22:32:51.543 GET 200 script 83.4 KB 131 ms —

22:32:51.546 GET 200 xhr 40 B 109 ms —

22:32:51.548 GET 200 script 5.0 KB 477 ms 1 alerts

22:32:51.551 GET 200 script 5.0 KB 385 ms —

22:32:51.555 GET 200 xhr 40 B 88 ms —

22:32:51.573 GET 200 script 18.2 KB 378 ms —

22:32:51.577 GET 200 script 5.0 KB 379 ms —

22:32:51.581 GET 200 xhr 40 B 99 ms —

22:32:51.584 GET 200 script 18.2 KB 384 ms —

22:32:51.586 GET 200 script 5.0 KB 381 ms 1 alerts

22:32:51.591 GET 200 xhr 40 B 97 ms —

22:32:51.594 GET 200 script 18.2 KB 380 ms 1 alerts

22:32:51.595 GET 200 script 91.3 KB 117 ms 1 alerts

22:32:51.756 GET 307 xhr 0 B 246 ms —

22:32:51.761 GET 307 xhr 0 B 263 ms —

22:32:51.763 GET 307 xhr 0 B 276 ms —

22:32:51.765 GET 307 xhr 0 B 376 ms 1 alerts

22:32:51.771 GET 200 script 83.4 KB 26 ms —

22:32:51.775 GET 200 script 5.0 KB 371 ms 1 alerts

22:32:51.777 GET 200 subdocument 4.4 KB 103 ms —

22:32:51.779 GET 200 script 50.3 KB 100 ms 4 alerts

22:32:51.904 GET 200 script 5.0 KB 686 ms 2 alerts

22:32:51.906 GET 307 xhr 0 B 697 ms 2 alerts

22:32:51.908 GET 200 script 18.2 KB 685 ms 2 alerts

22:32:51.911 GET 200 script 91.3 KB 101 ms 1 alerts

22:32:51.948 GET No response script 0 B 0 ms —

22:32:51.955 GET 200 subdocument 5.5 KB 26 ms —

22:32:52.026 GET 200 xhr 3.9 KB 110 ms —

22:32:52.041 GET 200 script 83.4 KB 25 ms —

22:32:52.042 GET 200 script 5.0 KB 95 ms 1 alerts

22:32:52.056 GET 200 xhr 0 B 125 ms 1 alerts

22:32:52.075 GET 200 xhr 3.9 KB 108 ms —

22:32:52.076 GET 200 xhr 3.9 KB 108 ms —

22:32:52.079 GET 200 xhr 5.0 KB 384 ms 1 alerts

http://pantasia.cfd/s/303705/s-50/

Domain graph

Hostnames

Connections

Network requests

Transaction #49

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pantasia.cfd/s/303705/s-50/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #49

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://pantasia.cfd/s/303705/s-50/

Domain graph

Network requests